Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FeatureReq - Partner Center] Programmatically Renew API Keys in Publish API v1.1 #218

Open
gabriel-stackhouse opened this issue Nov 4, 2024 · 3 comments
Assignees
Labels
Feature the issue is a new feature request that we might eventually implement in the product Partner Center Label to filter all items related to Partner Center

Comments

@gabriel-stackhouse
Copy link

Is your feature request related to a problem? Please describe.

I understand that a recent change was made to move from access tokens to rotating API keys to enhance the security of the Microsoft Edge Publish API. These API keys now expire every 72 days to reduce the risk of compromised credentials.

As it stands, there is no way to renew these keys programmatically. This means that every 72 days, a developer must manually log into the Partner Center, regenerate the API keys, and then manually update them in their CI/CD pipelines.

This manual process presents several challenges:

  • Increased Risk of Human Error: Manual key rotation increases the likelihood of mistakes, such as misconfiguration, forgetting to update the keys in all necessary locations, or forgetting to renew the keys entirely.
  • Scalability Issues: For small teams or projects that are maintained infrequently, this requirement adds an unnecessary operational burden.
  • Potential Security Risks: Ironically, the manual process may introduce security risks if keys are shared insecurely during the update process.

Describe the solution you'd like

I would like to have a way to programmatically renew API keys through an API endpoint or automation script.

Implementing this feature would:

  • Enhance security by allowing for more frequent key rotations without additional manual overhead.
  • Reduce the risk of deployment failures due to expired keys.
@gabriel-stackhouse gabriel-stackhouse added Feature the issue is a new feature request that we might eventually implement in the product Partner Center Label to filter all items related to Partner Center labels Nov 4, 2024
@ManikanthMSFT
Copy link
Collaborator

Hey @gabriel-stackhouse, thank you for your suggestion. We are looking into this and will let you know as soon as we have an update from our team.

Thank you.

@ManikanthMSFT ManikanthMSFT self-assigned this Nov 5, 2024
@ManikanthMSFT
Copy link
Collaborator

Hi @gabriel-stackhouse, we got an update from our team and would like to inform you that we have added this feature request to our upcoming feature list. However, at this time, we cannot commit to an exact timeline for its implementation. Rest assured, we recognize the importance of this feature and will prioritize it accordingly.

Thank you for your understanding and patience.

@gabriel-stackhouse
Copy link
Author

@ManikanthMSFT Thank you for the update - I look forward to this feature being implemented!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature the issue is a new feature request that we might eventually implement in the product Partner Center Label to filter all items related to Partner Center
Projects
None yet
Development

No branches or pull requests

2 participants